FreshWebMaster Fresh FTP Filename Directory Traversal Vulnerability

This host is installed with Fresh FTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbfreshftpclientdirtraversalvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ FreshWebMaster Fresh FTP Filename Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

CVE-2010-4149

CVE-2010-4149 concerns FreshWebMaster Fresh FTP prior to or around 5.37, where a directory traversal flaw allows an FTP server to cause the client to write arbitrary files by using a ..\ pattern in the filename. The root cause is insufficient sanitization of the downloaded filename, enabling trav...